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TECHNIQUE FOR EFFECTIVE 
MANAGEMENT OF RESOURC E CQNSIJMPTTON 

Teqhn^Ga;L Field 

The invention relates to resource management 
techniques, and more particularly to a technique for 
accounting for consumption of a resource, e.g., 
5 utilization of a postal service. 

Background of thfi Invention 

Postage representing payment for a postal 
service makes up a significant portion of expenses of 
many businesses. For example, an insurance company 
0 routinely sends a large number of bills and 

correspondence to customers via mail, thereby incurring 
substantial postage. 

To facilitate mailing of a large volume of 
mail, a franking system is often employed to frank, on 
5 mailpieces, postage indicia which serve as proof of 
postage. One such franking system may be a postage 
meter, or general purpose computer equipment, e,g., a 
personal computer (PC) , having appropriate software 
installed therein for printing postage indicia using a 
) local/network printer. 

To secure accounting of postage dispensation, 
some postal authorities, e.g., the United States Postal 
Service (USPS), advocate use of a postal security device 
(PSD) in a franking system. For example, the USPS 
promulgated specifications for the design of the PSD 
under an Information-Based Indicia Program (IBIP) , 

In general, a PSD has a secure housing, and 
within the secure housing are accounting registers and a 
cryptographic engine. These accounting registers 
typically include an ascending register and a descending 
register. As is well known, the ascending register is 
used to keep track of the amount of postage dispensed. 
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On the other hand, the descending register is used to 
keep track of the amount of postage available for postage 
dispensation. The cryptographic engine is used to sign 
certain postal information contained in a postage 
5 indicium to authenticate the same, in accordance with a 
well known public key algorithm. One such public key 
algorithm may be the Digital Signature Algorithm (DSA) 
described, e.g., in "Digital Signature Standard (DSS)," 
FlPg PU3 3 66, May 19, 1994. The cryptographic engine 
also carries out cryptographic authentication and signing 
for communications of the PSD with a remote data center, 
which may be maintained by a party other than a postal 
authority,, e.g., a postage metering equipment or service 
provider. Such communications may be used to set up and 
15 maintain the PSD, and to replenish the postage fund by 
adjusting the value of the descending register in the 
PSD, in accordance with a well known telemeter setting 
(TMS) technique. 



10 



Summary of the Inveni-inn 

We have recognized that the prior art use of 
the descending register to keep a postage fund in a PSD 
or franking system described above is inefficient. 
Specifically, in prior art, to avoid the inconvenience of 
performing the TMS frequently, e.g., daily, to adjust the 
descending register value to replenish the postage fund, 
a customer normally keeps the descending register value 
higher than the actual postage consumed each day. 
Depending on the volume of mail sent by the customer and 
the predictability of the mail volume, the descending 
register value can be significant, and the difference 
between the descending register value and the actual 
postage consumed each day may be substantial. We have 
recognized that such a difference represents undesirable 
illiguidity to the customer. For that matter, the prior 
art use of the descending register is totally undesirable 
as it causes the customer to commit a possibly large fund 
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in the descending register which the customer has not 
spent for proof of payments, and does not even earn 
interest on. 

In accordance with the invention, the customer 
5 is charged only for the postage franked. As a result, no 
fund is tied up in a descending register in a franking 
system. In fact, the need of use of the descending 
register may be completely obviated. Thus, in accordance 
with the invention, records of franking transactions 
3 performed by the franking system are communicated to a 
remote data center from time to time, e.g., periodically, 
to account for the postage franked in a reporting period. 
Each record includes at least (a) transaction time 
information, (b) the franking transaction amount, and (c) 
) an ascending register value indicating the cumulative 

postage franked. Based on the received records, the data 
center assesses the postage dispensed during the 
reporting period. The data center causes charging the 
assessed postage to an account associated with the 
franking system. In addition, the data center forwards a 
copy of the received records to another system for 
storage, which may be audited by the postal authority. 
The inventive arrangement may similarly be employed to 
account for other resource consumptions such as utility 
consumptions. In that case, the utility provider may 
also re-allocate the resource in a timely fashion in 
response to the customer needs based on statistics 
derived from the received records. For example, 
extraordinary consumption could relate to a malfunction 
which may otherwise have gone unnoticed for an extended 
period of time. 

Brief Descrip tion of the Drawi nn 

Further objects, features and advantages of the 
invention will become apparent from the following 
detailed description taken in conjunction with the 
accompanying drawing, in which: 
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Fig. 1 is a block diagram of a franking system 
in accordance with the invention for conducting franking 
transactions to generate postage indicia; 

Fig. 2 is a block diagram of a postal security 
5 device (PSD) used in the franking system of Fig. 1; 

Fig. 3 illustrates a format of a franking 
transaction record stored in the PSD of Fig. 2; 

Figs. 4A and 4B respectively illustrate 
franking transaction records in the format of Fig. 3; 
10 Fig. 5 illustrates a postage finance 

arrangement in accordance with the invention; 

Fig. 6 illustrates a format of a financial 
account record stored in a computer system in the 
arrangement of Fig. 5; 
m3 15 Fig. 7 illustrates a process performed by the 

"^t computer system for effecting postage finance in 

-Ij accordance with the invention; 

;}'J Fig. 8 illustrates a finance arrangement to 

account for consumption of a resource provided by a 
20 company in accordance with the invention; 
m . Fig. 9 is a block diagram of a meter for 

hi reporting the resource consumption; and 

Fig. 10 illustrates a finance arrangement to 
account for consumptions of different resources provided 
25 by more than one company in accordance with the 
invention . 



Detailed Description 

Fig. 1 illustrates franking system 100 
embodying the principles of the invention for generating 

30 postage indicia. In this particular illustrative 

embodiment, system 100 is configured as an "open system," 
where computer 105 may be a conventional personal 
computer (PC) serving as a host device, and where postal 
security device (PSD) 110, printer 115 for franking or 

35 printing postage indicia, and modem 120 are peripherals 
to computer 105. Alternatively, computer 105 may be a 
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workstation or any other general purpose computing 
machine. In addition, modem 120 in this instance is 
shown as an external modem, it will be appreciated that 
any internal modem or network interface card (NIC) within 
5 computer 105 may be used, instead. 

Fig, 2 illustrates PSD 110 in accordance with 
the invention. PSD 110 may be secured by well known 
hardware protection means and other tamper-resistant 
methodologies. As shown in Fig, 2, PSD 110 comprises 
processor 203, clock 205, static random-access memory 
(SRAM) 207, a non-volatile memory, e.g., flash memory 
209, communications interface 211 for interfacing with 
computer 105, and cryptographic engine 220. 

In a prior art PSD, a descending register is 
15 used to keep track of the amount of postage available for 
postage dispensation. When the descending register value 
decreases over time below a predetermined limit, e.g., 
zero, a franking system can no longer dispense postage 
until the descending register is reset. Such a reset may 
20 be achieved by way of electronic funds transfer, in 
accordance with a well known telemeter setting (TMS) 
technique. However, to avoid the inconvenience of 
performing resets frequently, e.g., daily, a customer 
normally keeps the descending register value higher than 
25 the actual postage consumed each day. Depending on the 
volume of mail sent by the customer and the 
predictability of the mail volume, the descending 
register value can be significant, and the difference 
between the descending register value and the actual 
30 postage consumed each day may be substantial. We have 

recognized that such a difference represents undesirable 
illiquidity to the customer. For that matter, the prior 
art arrangement using a descending register to store an 
available postage fund is totally undesirable as it 
35 causes the customer to commit a possibly large fund in 
the descending register on which the customer does not 
even earn interest. 
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In a postage finance arrangement in accordance 
with the invention described below, the customer is 
charged only for the postage franked. As a result, no 
fund is tied up in a descending register in a franking 
5 system. In fact, the need of use of the descending 
register may be completely obviated. The inventive 
postage finance arrangement involves communications of 
records of franking transactions by the franking system 
to a remote data center to account for the postage 
10 franked. 

Thus, in this illustrative embodiment, PSD 110 
contains no descending register. SRAM 207 however stores 
an ascending register value in ascending register 230. 
As is well known, ascending register 230 is used to keep 
15 track of the amount of postage dispensed. SRAM 207 also 
stores a first pair of public key and private key in key 
buffer 237, a second pair of public key and private key 
in key buffer 239, transaction log 241 for recording past 
franking transactions, counter 233 and other 
20 administrative information. 

Because the contents of SRAM 207 need to be 
refreshed from time to time, SRAM 207 is required to be 
powered by a battery (not shown) , in PSD 110- For fear 
that the battery power should be unexpectedly lost, the 
25 ascending register value and the transaction log are 

redundantly stored in flash memory 209 whose contents, 
unlike those of SRAM 207, need not be refreshed. Flash 
memory 209 also contains program instructions for 
processor 203 to orchestrate, in concert with 
30 cryptographic engine 220, the operation of PSD 110. This 
operation includes generation of digital signatures for 
inclusion in postage indicia to be franked or printed by 
printer 115 on envelopes, or labels for application onto 
mailpieces. The digital signatures are used to 
35 authenticate the respective postage indicia. 

The generation of a digital signature and 
subsequent verification thereof require use of the key 
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pair —private key 236a and public key 236b — in buffer 
237, in accordance with a well known public key 
algorithm. In a conventional manner, the pair of keys 
are generated mathematically. In this particular 
5 illustrative embodiment, the public key algorithm used is 
the Digital Signature Algorithm (DSA) described, e.g., in 
"Digital Signature Standard (DSS)," FTPS PHR ififi , May 19, 
1994. Cryptographic engine 220 uses private key 236a to 
sign certain postal data. The resulting digital 
10 signature, which is distinct for each postage indicium, 
is included in the indicium. 

Unlike public key 236b which may be made 
available to the public in the postage indicium, the 
corresponding private key 236a needs to be securely 
15 stored in PSD 110. Otherwise, using private key 236a 

which is illegally obtained by, say, tampering with PSD 
110, a perpetrator may fraudulently generate postage 
indicia without accounting for the postage expended. 
Thus, to prevent fraud, for example, any tampering with 
20 PSD 110 may cause the power of the battery therein to be 
cut off, thereby "zeroizing" or clearing some or all 
contents of SRAM 207, and each private key within PSD 
110. 

Similarly, the key pair — private key 238a and 
25 public key 238b— in buffer 239, different from the key 
pair in buffer 237, is used for authenticating 
communications with the aforementioned remote data center 
to set up and maintain PSD 110, and to account for the 
postage franked in accordance with the invention. 
30 To keep track of the franking transactions 

handled by PSD 110, processor 203 maintains counter 233 
in SRAM 207, which counts in an ascending order starting 
from zero. Processor 203 causes counter 233 to increase 
its count by one each time to account for a new franking 
35 transaction. Thus, the current count, denoted TID, is 
used to identify the franking transaction being 
conducted. Processor 203 also maintains transaction log 
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241 which records past franking transactions. 

Fig. 3 illustrates the format of each 
transaction record in log 241, In this instance, each 
transaction is identified by a TID in field 301 of the 
5 record. Field 303 contains information concerning date 
and time of the transaction provided by clock 205. Field 
305 contains information concerning the transaction 
amount, i.e., the postage franked in the transaction. 
Field 307 contains the ascending register value as a 
10 result of the transaction. Field 309 contains a FLAG 

which indicates whether any ascending register "rollover" 
has occurred in the current transaction. An occurrence 
of an ascending register rollover stems from the limited 
number of digits that ascending register 230 can 
L5 accommodate. In this illustrative embodiment, register 
230 can accommodate up to 9 digits. As a result, the 
maximum value which can be held by register 230 is 
9, 999, 999.99. When a value is added to the current 
ascending register value with the resulting sum exceeding 
this maximum value, an ascending register rollover would 
occur and the left-most digit of the resulting sum would 
be truncated to maintain the 9 digit limit. Thus, for 
example, when ascending register 230 is at 9,999,998.98, 
if 1.04 is added thereto, the resulting ascending 
5 register value would be 0,000,000,02 because of the 

rollover, instead of the supposed sum 10,000,000.02 as 
the left most digit "1" of the supposed sum is truncated 
to maintain the 9 digit limit. 

When PSD 110 is initially put in service, an 
0 initial record is created in log 241, In this initial 
record, field 301 contains TID = 0; field 303 indicates 
the date and time that PSD 110 is put in service; field 
305 contains zero as the transaction amount since no 
postage has been franked; field 307 contains zero as the 
? initial ascending register value; and field 309 contains 
Flag = 0 indicating no ascending register rollover has 
occurred. 
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When processor 203 conducts the first franking 
transaction to dispense first postage in response to a 
user request communicated through computer 105, processor 
203 causes counter 233 to increase its count from zero to 
5 one, thereby identifying the first franking transaction 
with TID =1. In addition, processor 203 adds the first 
postage value to the current ascending register value 
iwhich is zero in this instance) . Processor 203 
thereafter transmits to engine 220, an ensemble of 
.0 information including (a) the first postage value, (b) 

the resulting ascending register value, and (c) a set of 
other postal data elements which need to be signed by 
engine 220 to generate a digital signature. 

In response, engine 220 transmits the required 
5 digital signature to processor 203 for inclusion in a 
postage indicium to be printed by printer 115, thereby 
accomplishing the first franking transaction. Processor 
203 then posts the transaction by creating a record in 
log 241, in accordance with the format of Fig. 3. The 
0 resulting record contains TID = 1 in field 301, the date 
and time that the first transaction occurs in field 303, 
the first postage value in field 305, the updated 
ascending register value in field 307, and FLAG = 0 in 
field '309 as no ascending register rollover has occurred 
5 in this transaction. 

In addition, the updated value in ascending 
register 230 and the newly created record in log 241 are 
redundantly stored by processor 203 in flash memory 209. 

Processor 203 conducts the subsequent franking 
transactions and creates the corresponding records in a 
manner similar to the above. However, the FLAG value in 
field 309 of the record of a particular transaction 
depends on whether any ascending register rollover 
described above has occurred in that particular 
transaction. Refer now to Figs. 4A and 4B which 
illustrate the records of two consecutive franking 
transactions by system 100, respectively. Fig. 4A 
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illustrates transaction record 401 corresponding to 
transaction TID = 2233. As shown in field 307 of record 
401, the ascending register value resulting from the 
transaction is 9,999,986.60. Since no ascending register 
5 rollover has occurred in this transaction, field 309 of 
record 401 has Flag = 0 indicating such. 

Fig. 4B illustrates transaction record 402 
corresponding to franking transaction TID = 2234. As 
shown in field 305 of record 402, the postage franked or 
10 the transaction amount is 15.25, As a result, had no 
ascending register rollover had occurred, field 307 of 
record 4 02 would have included a supposed sum 
9,999,986.60 + 15.25 = 10,000,001.85. However, this 
supposed sum exceeds the 9 digit limit that ascending 
15 register 230 can accommodate in this instance. As a 
result, an ascending register rollover occurs in this 
transaction and the left-most digit of the supposed sum 
is truncated. Thus, field 307 of record 402 contains 
0,000,001.85 as the updated ascending register value. In 
20 addition, field 309 has FLAG = 1 indicating the ascending 
register rollover occurrence in this transaction. 

Fig, 5 illustrates the postage finance 
arrangement in accordance with the invention where data 
center 503 communicates with franking systems 100 and 
25 505-1 through 505-N to, among other things, obtain 

therefrom franking transaction records from time to time 
to account for their postage consumptions, respectively, 
where N represents an integer greater than or equal to 
one. In this illustrative embodiment, each of franking 
30 systems 505-1 through 505-N is structurally identical to 
system 100 described above. Data center 503 comprises 
computer system 507 which is capable of communicating 
data with selected ones of franking systems 100 and 505-1 
through 505-N via communication connections established 
35 by modem pool 509. These connections may be, e.g., dial- 
up connections, Internet connections, etc. The data 
communications between data center 503 and the franking 
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systems may be in accordance with the protocol disclosed 
in U.S. Patent No. 5,715,164 issued February 3, 1998 to 
Liechti et al. 

In this illustrative embodiment, computer 
5 system 507 initiates communications with franking systems 
100 and 505-1 through 505-N periodically to obtain the 
respective transaction records, from which the postage 
consumptions for the period is derived in a manner 
described below. Such postage consumptions are then 
accounted for by charging same to the accounts associated 
with the franking systems, where such accounts may be 
checking accounts, debit accounts, credit accounts, 
revolving credit accounts, prefunded accounts, escrow 
accounts, etc., held by one or more financial 
institutions. To that end, system 507 maintains database 
54 0 therein, which contains financial account records 
concerning the respective franking systems served by data 
center 503. Alternatively, database 54 0 may be remote 
from data center 503. 

Fig, 6 illustrates the format of each financial 
account record in database 540. In this instance, each 
franking system is identified by a PSD serial number in 
field 603 pre-assigned to its PSD. Field 605 contains 
information concerning the financial account associated 
with the franking system, which includes a financial 
account number, and data identifying the financial 
institution with which the account is maintained. 

Since the number of franking systems served by 
data center 503 may be significant and their geographic 
locations, and thus the time zones they are in, may be 
very different, computer system 507 may not communicate 
with all of the franking systems at the same time. 
Rather, computer 507 communicates with the franking 
systems in a staggered manner. Preferably, the 
communication with each franking system takes place 
between the last mail pick-up of the day in the area 
where the franking system resides and the first mail 
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pick-up of the following day in that area. 

Thus, for example, let's say the last mail 
pick-up on each business day in the area where franking 
system 100 resides is at 5 p.m. (local time) and the 
3 first mail pick-up is at 8 a.m. the following business 
day. Computer system 507 may be programmed to 
communicate with system 100 between 5 p.m. each business 
day and 8 a.m. the following business day, e.g., 5:20 
p.m. That is, at 5:20 p.m. each business day, computer 
system 507 initiates communications with system 100 to 
obtain those records in transaction log 241 having field 
303 time-stamped after 5 p.m. of the previous business 
day up to 5 p.m. of the current business day. Even 
though system 100 may be used to frank additional postage 
15 after 5 p.m. of the day, such postage has not been 

"earned" by the postal authority as no postal service has 
been rendered thereby after 5 p.m. that day, and not 
until 8 a.m. the following day. In any event, such 
additional franked postage would be picked up by computer 
20 system 507 in the next reporting cycle. Thus, the 
present postage finance arrangement advantageously 
accounts for the expended postage for which postal 
service has been rendered. 

It should be noted that if the mail pick-up 
25 times concerning a franking system vary, e.g., from day 
to day, the schedule of communications with the franking 
system can be programmed accordingly in computer system 
507 to realize the present postage finai:ice arrangement. 

Continuing the above example, without loss of 
30 generality, computer system 507 is programmed to initiate 
a communication connection with franking system 100 at 
5:20 p.m. on each business day. Through such a 
communication connection, computer system 507 requests 
from franking system 100 those transaction records in the 
35 current reporting cycle, i.e., those records time-stamped 
after 5 p.m. of the previous business day up to 5 p.m. of 
the current business day. In response, processor 203 in 
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system 100 retrieves the transaction records in question 
from transaction log 241. The retrieved transaction 
records are then cryptographically signed and/or 
encrypted by cryptographic engine 220. In this instance, 
5 these records are cryptographically signed using private 
key 238a in buffer 239, in accordance with a well known 
data authentication algorithm, e.g., the DSA. The signed 
transaction records are transmitted to computer system 
507 through the established communication connection. 

After computer system 507 receives the signed 
transaction records from franking system 100, as 
indicated at step 703 in Fig. 7, system 507 in a well 
known manner uses public key 238b, a copy of which was 
provided thereto earlier, to authenticate the received 
15 records, as indicated at step 706, If the received 

records cannot be authenticated, system 507 at step 709 
causes franking system 100 to re-transmit the signed 
records in question. However, a predetermined limit on 
the number of allowable re-transmissions is imposed. 
20 When such a limit is exceeded, computer system 507 may 
cause franking system 100 to shut down until it is 
satisfactorily audited and re-started by authorized 
personnel . 

Otherwise, if the received transaction records 
25 are authenticated, computer system 507 at step 712 
forwards a copy of the signed transaction records 
received from system 100 to postal authority comput-er 550 
for storage and analysis purposes. Computer system 507 
then computes the total postage incurred in the franking 
30 transactions based on the received records. It should be 
noted that the received records are in chronological 
order, with the first record time-stamped earliest in the 
current reporting cycle. At step 715, system 507 
subtracts the ascending register value in field 307 of 
35 the first received record from that of the last received 
record, and adds to the difference the transaction amount 
in field 305 of the first received record. The resulting 
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value is stored in a temporary buffer (not shown) in SRAM 
207, as indicated at step 718. Such a value would equal 
the postage franked during the current reporting cycle, 
provided that no ascending register rollover occurred 
5 during such a cycle. Computer system 507 at step 721 

determines any such rollover by identifying any FLAG = 1 
in field 309 of the received records. If one or more of 
the records have FLAG =1, for each rollover, computer 
system 507 at step 724 adds 10,000,000 to the value in 
the temporary buffer to obtain the correct postage 
franked during the cycle. In any event, computer system 
507 at step 727 transmits the resulting temporary buffer 
value, representing the postage franked during the cycle 
to settlement system 565, along with the financial 
15 account information associated with system 100. 

In response, settlement system 565 causes 
transfer of funds in the amount of the franked postage 
from the financial account associated with franking 
system 100 to a predetermined postal authority account. 
20 System 565 then sends to postal authority computer 550 a 
message indicating the completion of the funds transfer. 

Postal authority computer 550 may analyze 
and/or audit the franking transaction records of franking 
system 100 for any reporting cycle, which were forwarded 
25 thereto by data center 503, to verify whether the amount 
of the funds transferred to the postal authority account 
matches the postage consumed by system 100 in that cycle. 
Specifically, computer 550 may retrieve from its storage 
the franking transaction records of system 100 of a 
30 selected. reporting cycle. Computer 550 first uses public 
key 238b, a copy of which was provided thereto earlier, 
to authenticate the retrieved records. After the records 
are authenticated, computer 550 may retrace the franking 
transactions in the reporting cycle by going through the 
35 records one by one in chronological order. In 

particular, computer 550 examines field 305 and field 307 
of each transaction record, which indicate the 
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corresponding franking transaction amount, and the 
resulting ascending register value, respectively. 
Computer 550 then determines whether the ascending 
register value properly takes into account the 
5 transaction amount in the same record. If it does not, 
system 100 fails the audit. In that case, computer 550 
generates an exception report concerning system 100 and 
transmits same to data center 503. Upon receiving the 
exception report, data center 503 causes system 100 to 
10 shut down until it is satisfactorily audited and re- 
started by authorized personnel. 

The above-described postage finance arrangement 
in accordance with the invention may be readily modified 
to account for resource consumptions in general. For 
15 example, Fig. 8 illustrates an arrangement which, similar 
to the arrangement of Fig. 5, may be used to account for 
gas consumptions by customers of a natural gas company. 
Similar to data center 503, data center 803, which is 
operated and maintained by a resource consumption 
20 reporting company, from time to time communicates with 
gas meters 805-1 through 805-]yi in accordance with a 
predetermined protocol. In this instance, gas meters 
805-1 through 805-M are structurally identical, and 
reside on customer premises to measure and report gas 
25 consumptions by the customers, respectively, where M 
represents an integer greater than one. 

Fig. 9 illustrates one such gas meter, 
generically denoted 805. As shown in Fig. 9, meter 805 
includes measuring device 903 which measures the amount 
30 of gas consumed by the customer associated therewith. 

Like PSD 110, meter 805 also includes memory 907 similar 
to SRAM 207, clock 905 similar to clock 205, and 
cryptographic engine 920 similar to cryptographic engine 
220. Memory 907 comprises counter 833 similar to counter 
35 233, and register 930 similar to ascending register 230 
to keep track of the amount of gas consumed. Processor 
903 creates consumption records periodically, e.g., once 
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every 15 minutes, to account for the gas consumptions in 
the corresponding periods. The format of each 
consumption record is similar to that of Fig. 3, although 
the field corresponding to field 305 contains information 
5 concerning the amount of gas consumed in the 

corresponding period instead of a transaction amount. 
The consumption records, thus created, constitute 
consumption log 941 in memory 907. The records may be 
cryptographically signed before they are communicated to 
10 data center 803 through communication facility 945 which 
includes, e.g., a modem. To that end, memory 907 
includes at least private key 938 for use by 
cryptographic engine 920 to cryptographically sign the 
consumption records, in accordance with a public key 
15 algorithm, e.g., the DSA. Copies of the public key 

corresponding to private key 938 are provided beforehand 
to data center 803 and gas company computer 850 for 
authenticating the consumption records communicated by 
meter 805. 

20 Like data center 503, data center 803 polls 

each of gas meters 805-1 through 805-M for consumption 
records of each reporting cycle. Data center 803 then 
receives and processes the records in accordance with a 
routine similar to that of Fig 7, Data center 803 
25 computes the charges for the gas consumption during the 
reporting period, and transmits the computed charges and 
the financial account information associated with the gas 
meter to settlement system 865. Like settlement system 
565, settlement system 865 causes transfer of funds 
30 covering such charges from the financial account 

associated with the gas meter to a predetermined gas 
company account. System 865 then sends to gas company 
computer 850 a message indicating the completion of th^ 
funds transfer. 

35 Like postal authority computer 550, gas company 

computer 850 may audit the gas consumption records of a 
gas meter for any reporting cycle, which were forwarded 
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thereto by data center 803. In addition, computer 850 
may analyze the received consumption records to obtain 
statistics concerning relative gas demands in different 
geographic areas served by the natural gas company. 
5 Based on such statistics, computer 850 may effectively 
manage the supply of gas from its limited sources to the 
different geographic areas according to their demands . 
To that end, computer 850 may control the gas transport 
to direct calculated amounts of gas to the respective 
10 areas. Thus, with the inventive arrangement, the shorter 
is the reporting cycle, the closer the gas distribution 
to customers to a just-in-time fashion. 

It should be noted that data center 803 may 
serve more than one provider providing resources to 
15 effect the finance arrangement in accordance with the 
invention. Fig. 10 illustrates one such arrangement 
where data center 803 serves a gas company and an 
electric company to account for the gas consumptions and 
electric consumptions by their customers, respectively. 
20 As shown in Fig. 10, apart from gas meters 805-1 through 
805-M, electric meters 1005-1 through 1005-K, which are 
designed similarly to meter 805, communicate records of 
electric consumptions to data center 803 in accordance 
with the predetermined protocol, where K represents an 
25 integer greater than one. Data center 803 computes the 

charges for the respective gas and electric consumptions, 
and causes settlement system 865 to transfer funds 
covering such charges from the customer accounts to the 
predetermined gas company and electric company accounts, 
30 respectively. In addition, gas company computer 950 and 
electric company computer 1050 may audit and/or analyze 
the consumption records forwarded thereto by data center 
803. 

Based on the disclosure heretofore, it is 
35 apparent that the arrangement of Fig. 10 can be expanded 
to serve many different resource providers as long as the 
devices measuring the resource consumptions are capable 



wo 00/52614 




PCT/USOO/03585 



of communicating consumption records to data center 803 
in accordance with the predetermined protocol. Of 
course, one such resource provider may be a postal 
authority providing a postal service described before. 
5 Thus, it is apparent that data center 803 may communicate 
with franking systems similar to system 100 described 
before, a well as utility meters similar to meter 805, in 
accordance with the same predetermined protocol to effect 
the inventive finance arrangement. 
^0 The foregoing merely illustrates the principles 

of the invention. It will thus be appreciated that those 
skilled in the art will be able to devise numerous other 
arrangements which embody the principles of the invention 
and are thus within its spirit and scope. 
15 For example, in the disclosed embodiment, 

certain communication data is cryptographically signed 
for authentication purposes. It will be appreciated that 
such data may be cryptographically encrypted and/or 
signed. 

20 In addition, in the disclosed embodiment, the 

DSA is illustratively used to perform data 
authentication, another well-known data authentication 
algorithm such as the RSA or Elliptic Curve algorithm may 
be used, instead. 

25 Further, in the disclosed embodiment, franking 

system 100 is configured as an open system. It will be 
appreciated that the franking system may be configured as 
a closed system in the form of a postage meter including 
therein a dedicated printer. 

30 Finally, PSD 110 and meter 805 are disclosed 

herein in a form in which various functions are performed 
by discrete functional blocks. However, any one or more 
of these functions could equally well be embodied in an 
arrangement in which the functions of any one or more of 

35 those blocks or indeed, all of the functions thereof, are 
realized, for example, by one or more appropriately 
programmed processors. 



